Cyfrin Audits Profile picture
Securing the blockchain and its users. Industry-leading smart contract audits, tools, and education. Powering @codehawks | @cyfrinupdraft | @soloditofficial
Feb 7 6 tweets 2 min read
📰 Cyfrin's February Blockchain Security and Education Roundup is here!

Inside:

- The latest from Cyfrin
- Major hacks & security incidents
- Vital industry insights

Find out what's inside this month's edition 👇 Image 2/ From Cyfrin's world: 🚀

- Launched industry-backed blockchain certifications
- New safe-tx-hashes tool to help prevent the next Radiant Capital-style hack
- Comprehensive guides on avoiding crypto scams
- Research on securing dev environments with Docker

👇
Dec 8, 2023 8 tweets 3 min read
There's a 1 in 20 chance all your money in DeFi will be gone in a year.

Here's the top 5 ways hackers are stealing your crypto in 2023 💰 Top attack vectors in DeFi 2023 1. 🗝️ Stolen private keys [$243M stolen through 16 attacks]

Devs often need to add their private keys within their repositories in order to interact with smart contracts.

Mistakenly deploying them to the public means hackers now have access to millions of dollars. Hide your private keys
Nov 30, 2023 6 tweets 2 min read
What if we told you that you could write ONE TEST that would check for almost every possible exploit?

Hello fuzz tests👋🏼

Fuzzing allow you to automagically supply random data to a system in an attempt to break it and cover most edge cases.

Here's how it works 👇 Fuzz and unit tests kissing 1/ ✍🏼 Write a smart contract and define invariants

Invariants are statements that must always remain true.

For example, in the contract below, our variable `shouldAlwaysBeZero` MUST always return 0. Invariant example
Nov 23, 2023 15 tweets 7 min read
Did you know that you can save users up to 90% of transaction costs by optimizing your contracts for less gas?

We’ve tested dozens of gas optimization techniques and have collected the best 11 tips for you here 👇 11 best Solidity gas optimization tips 1) Minimize on-chain data

Storing data on-chain is often the most expensive approach.

Using events to store data off-chain, as well as using CIDs in our contracts pointing to solutions like IPFS, Arweave, and others are a great way to save on on-chain data.
Inefficient Storage
Efficient Storage
Nov 3, 2023 7 tweets 2 min read
3 years ago Patrick Collins released his first Web3 development course

Since then, 10,000s web3 developers have learned from his courses

Today, we’re bringing it to the next level

Cyfrin Updraft, the ultimate web3 learning platform is here

Here’s everything you need to know👇 Image 1/ What is Cyfrin Updraft?

Cyfrin updraft is the ultimate web3 learning platform for web3 developers and security auditors to learn:

- Smart contract development
- Web3 frontend development
- Smart contracts security and auditing

With 50+ hours of courses, completely for free.
Oct 11, 2023 14 tweets 3 min read
🚀 Want to make your Solidity contracts more efficient and save on gas?

Mastering gas optimization is key.

Here's a guide to help you understand its importance and how to get started. ⚡️ Gas optimization isn't just about cutting costs; it's about improving user experience.

Every bit of gas saved can elevate your contract's performance and appeal.